Re: intermittent bad horizontal referral?
On 20.10.11 16:11, Karl Auer wrote: Date: Thu, 20 Oct 2011 16:11:03 +1100 From: Karl Auer ka...@biplane.com.au To: BIND users bind-us...@isc.org Subject: Re: intermittent bad horizontal referral? Someone wrote (privately, so I'm not giving a name): There's a bit of problem with the DNS. You might want to jump over to http://dns.squish.net/ and run an NS traversal for biplane.com.au -- pps.com.au's DNS is befuddled. This is true. Two of the four PPS nameservers do not have glue records in .com.au. What I don't understand is how a trace can compete at all, if there is no glue. There are glues for some of pps.com.au servers in com.au zone. So, some glue records exists, alth0ougn not all that should exist. However that's enough for the resolution to work. If there are no referrals to x.com.au in .com.au, how can a query jump the gap? Because I can see that happening in a trace. Here are two traces for pps.com.au. The first shows referrals in .com.au, the second does not. It looks as if n.au somehow answered directly, but g.au did not. n.au seems to handle both .au and .com.au, while s.au (not g.au) only handles .au, so it sent referral to com.au servers. au. 172800 IN NS o.au. au. 172800 IN NS n.au. au. 172800 IN NS a.au. au. 172800 IN NS l.au. au. 172800 IN NS m.au. au. 172800 IN NS r.au. au. 172800 IN NS h.au. au. 172800 IN NS p.au. au. 172800 IN NS s.au. au. 172800 IN NS u.au. au. 172800 IN NS v.au. au. 172800 IN NS b.au. ;; Received 496 bytes from 192.112.36.4#53(g.root-servers.net) in 348 ms com.au. 172800 IN NS q.au. com.au. 172800 IN NS j.au. com.au. 172800 IN NS i.au. com.au. 172800 IN NS h.au. com.au. 172800 IN NS o.au. com.au. 172800 IN NS l.au. com.au. 172800 IN NS g.au. com.au. 172800 IN NS n.au. com.au. 172800 IN NS m.au. com.au. 172800 IN NS p.au. com.au. 172800 IN NS k.au. ;; Received 408 bytes from 2607:f140::fffe::e#53(s.au) in 193 ms pps.com.au. 14400 IN NS ppsdns6.pps.com.au. pps.com.au. 14400 IN NS ppsdns4.pps.com.au. pps.com.au. 14400 IN NS ppsdns2.pps.com.au. pps.com.au. 14400 IN NS ppsdns1.pps.com.au. pps.com.au. 14400 IN NS ppsdns3.pps.com.au. ;; Received 214 bytes from 202.65.12.72#53(i.au) in 16 ms [deleted] au. 172800 IN NS b.au. au. 172800 IN NS r.au. au. 172800 IN NS a.au. au. 172800 IN NS o.au. au. 172800 IN NS p.au. au. 172800 IN NS v.au. au. 172800 IN NS l.au. au. 172800 IN NS m.au. au. 172800 IN NS n.au. au. 172800 IN NS h.au. au. 172800 IN NS s.au. au. 172800 IN NS u.au. ;; Received 496 bytes from 2001:dc3::35#53(m.root-servers.net) in 178 ms pps.com.au. 14400 IN NS ppsdns3.pps.com.au. pps.com.au. 14400 IN NS ppsdns2.pps.com.au. pps.com.au. 14400 IN NS ppsdns4.pps.com.au. pps.com.au. 14400 IN NS ppsdns1.pps.com.au. pps.com.au. 14400 IN NS ppsdns6.pps.com.au. ;; Received 214 bytes from 69.36.145.34#53(n.au) in 227 ms -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Depression is merely anger without enthusiasm. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: intermittent bad horizontal referral?
Someone wrote (privately, so I'm not giving a name): There's a bit of problem with the DNS. You might want to jump over to http://dns.squish.net/ and run an NS traversal for biplane.com.au -- pps.com.au's DNS is befuddled. This is true. Two of the four PPS nameservers do not have glue records in .com.au. What I don't understand is how a trace can compete at all, if there is no glue. That is, root should return a set of referrals to .au, one of the .au servers then returns referrals to .com.au, one of those returns referrals to biplane.com.au, one of those can then answer the actual query. If there are no referrals to x.com.au in .com.au, how can a query jump the gap? Because I can see that happening in a trace. Here are two traces for pps.com.au. The first shows referrals in .com.au, the second does not. It looks as if n.au somehow answered directly, but g.au did not. So I'm confused (and possibly befuddled). Firstly as to why n.au would have *any* information about pps.com.au, and secondly why g.au would have different information than n.au :-( Regards, K. kauer@karl:~$ dig +trace pps.com.au ns ; DiG 9.7.1-P2 +trace pps.com.au ns ;; global options: +cmd . 113025 IN NS c.root-servers.net. . 113025 IN NS a.root-servers.net. . 113025 IN NS m.root-servers.net. . 113025 IN NS k.root-servers.net. . 113025 IN NS f.root-servers.net. . 113025 IN NS b.root-servers.net. . 113025 IN NS j.root-servers.net. . 113025 IN NS d.root-servers.net. . 113025 IN NS g.root-servers.net. . 113025 IN NS l.root-servers.net. . 113025 IN NS h.root-servers.net. . 113025 IN NS e.root-servers.net. . 113025 IN NS i.root-servers.net. ;; Received 512 bytes from 139.130.4.4#53(139.130.4.4) in 7 ms au. 172800 IN NS o.au. au. 172800 IN NS n.au. au. 172800 IN NS a.au. au. 172800 IN NS l.au. au. 172800 IN NS m.au. au. 172800 IN NS r.au. au. 172800 IN NS h.au. au. 172800 IN NS p.au. au. 172800 IN NS s.au. au. 172800 IN NS u.au. au. 172800 IN NS v.au. au. 172800 IN NS b.au. ;; Received 496 bytes from 192.112.36.4#53(g.root-servers.net) in 348 ms com.au. 172800 IN NS q.au. com.au. 172800 IN NS j.au. com.au. 172800 IN NS i.au. com.au. 172800 IN NS h.au. com.au. 172800 IN NS o.au. com.au. 172800 IN NS l.au. com.au. 172800 IN NS g.au. com.au. 172800 IN NS n.au. com.au. 172800 IN NS m.au. com.au. 172800 IN NS p.au. com.au. 172800 IN NS k.au. ;; Received 408 bytes from 2607:f140::fffe::e#53(s.au) in 193 ms pps.com.au. 14400 IN NS ppsdns6.pps.com.au. pps.com.au. 14400 IN NS ppsdns4.pps.com.au. pps.com.au. 14400 IN NS ppsdns2.pps.com.au. pps.com.au. 14400 IN NS ppsdns1.pps.com.au. pps.com.au. 14400 IN NS ppsdns3.pps.com.au. ;; Received 214 bytes from 202.65.12.72#53(i.au) in 16 ms pps.com.au. 3600IN NS ppsdns3.pps.com.au. pps.com.au. 3600IN NS ppsdns6.pps.com.au. pps.com.au. 3600IN NS ppsdns2.pps.com.au. pps.com.au. 3600IN NS ppsdns4.pps.com.au. pps.com.au. 3600IN NS ppsdns1.pps.com.au. ;; Received 342 bytes from 2406:a000::5#53(ppsdns6.pps.com.au) in 21 ms kauer@karl:~$ dig +trace pps.com.au ns ; DiG 9.7.1-P2 +trace pps.com.au ns ;; global options: +cmd . 113019 IN NS m.root-servers.net. . 113019 IN NS h.root-servers.net. . 113019 IN NS f.root-servers.net. . 113019 IN NS e.root-servers.net. . 113019 IN NS j.root-servers.net. . 113019 IN NS i.root-servers.net. . 113019 IN NS k.root-servers.net. . 113019 IN NS l.root-servers.net. .
Re: intermittent bad horizontal referral?
On Oct 18 2011, Chuck Swiger wrote: Hi-- On Oct 17, 2011, at 3:37 PM, Karl Auer wrote: To see it, do (for example): dig+trace biplane.com.au ns Some such queries return correctly, some end up in a BHR loop. I don't see a bad horizontal referral being returned anywhere, but I do get errors against ppsdns6.pps.com.au since that appears to be an IPv6 only nameserver. There do seem to be some other oddities. The [a-z].au servers don't have any glue for ppsdns4.pps.com.au, and they have wrong glue for ppsdns3.pps.com.au referencing 203.14.38.7 (which doesn't respond) rather than 116.197.146.5. -- Chris Thompson Email: c...@cam.ac.uk ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: intermittent bad horizontal referral?
Hi-- On Oct 17, 2011, at 3:37 PM, Karl Auer wrote: To see it, do (for example): dig+trace biplane.com.au ns Some such queries return correctly, some end up in a BHR loop. I don't see a bad horizontal referral being returned anywhere, but I do get errors against ppsdns6.pps.com.au since that appears to be an IPv6 only nameserver: % dig +trace biplane.com.au ns ; DiG 9.6.0-APPLE-P2 +trace biplane.com.au ns ;; global options: +cmd [ ... ] ;; Received 412 bytes from 58.65.253.73#53(b.au) in 89 ms biplane.com.au. 14400 IN NS ppsdns6.pps.com.au. biplane.com.au. 14400 IN NS ppsdns2.pps.com.au. biplane.com.au. 14400 IN NS ppsdns1.pps.com.au. biplane.com.au. 14400 IN NS ppsdns4.pps.com.au. ;; Received 184 bytes from 69.36.146.34#53(o.au) in 108 ms dig: couldn't get address for 'ppsdns6.pps.com.au': not found I don't believe the world is ready for IPv6-only nameservers, but YMMV: http://www.dnsvalidation.com/reports/4e9cb0d37d79ee5fbe08 Regards, -- -Chuck ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
